Re: [Devil-linux-develop] freshmeat.net: Project details for IP Tables network magic SysRq

[Bruce S. <bw...@ar...>]

> > You supply two prime numbers (manually) while running "make".
> > This would be in the DL build process?  This means the encryption is
> > static and can only be changed by recompiling DL?  This means the key 
> > is burned on the CD and is the same for everyone with a stock distro? 
> > SECURITY HOLE!!!  I changed my mind about including this!  Or at least
> > turn it off by default for all distro's available for download.  YUCK!
> 
> I know. But you would not enable it from any IP, would you? 

But IP spoofing is easy, and it's not like there is a conversation going
on.  All someone has to do is spoof the source IP and send a packet.

> Maybe those numbers can be supplied on some other way in the future. 
> May let's mail the author. What do you think?

Yes, it would be nice if the numbers could be supplied as an option when
loading the module, and as an option in the client program (along with
the port number).  As it is now, I wouldn't include it in DL.

 - BS